3 ms·

(these kinds of) Crashes can be manipulated, though. If you can't restore a stable state, you have created instability. Failing gracefully in this context means

(these kinds of) Crashes can be manipulated, though. If you can't restore a stable state, you have created instability. Failing gracefully in this context means failing without creating instability or insecurity.

teacup50 11y ago
An abort()/__builtin_trap/etc shouldn't generally be manipulable.
- AnthonyMouse 11y ago
  The failure mode is the one where you terminate in the middle of an operation that was expected to be atomic or ordered and then the program restarts and does step two without finishing step one.
  - cesarb 11y ago
    You have to protect against that anyway, otherwise you're vulnerable to power cuts.
    - Johnny555 11y ago
      And operating system crashes, and being killed by the OOM handler (which is probably likely if you're out of heap), and all of the other things that can kill a process without warning.